| /Linux-v5.15/net/bridge/ |
| D | br_ioctl.c | 89 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in add_del_if()
198 if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) in br_dev_siocdevprivate()
205 if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) in br_dev_siocdevprivate()
212 if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) in br_dev_siocdevprivate()
219 if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) in br_dev_siocdevprivate()
259 if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) in br_dev_siocdevprivate()
266 if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) in br_dev_siocdevprivate()
275 if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) in br_dev_siocdevprivate()
289 if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) in br_dev_siocdevprivate()
351 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in old_deviceless()
[all …]
|
| /Linux-v5.15/kernel/cgroup/ |
| D | namespace.c | 66 if (!ns_capable(user_ns, CAP_SYS_ADMIN)) in copy_cgroup_ns()
103 if (!ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN) || in cgroupns_install()
104 !ns_capable(cgroup_ns->user_ns, CAP_SYS_ADMIN)) in cgroupns_install()
|
| /Linux-v5.15/include/linux/ |
| D | capability.h | 211 extern bool ns_capable(struct user_namespace *ns, int cap);
237 static inline bool ns_capable(struct user_namespace *ns, int cap) in ns_capable() function
269 return ns_capable(ns, CAP_CHECKPOINT_RESTORE) || in checkpoint_restore_ns_capable()
270 ns_capable(ns, CAP_SYS_ADMIN); in checkpoint_restore_ns_capable()
|
| /Linux-v5.15/kernel/ |
| D | capability.c | 394 bool ns_capable(struct user_namespace *ns, int cap) in ns_capable() function
398 EXPORT_SYMBOL(ns_capable);
449 return ns_capable(&init_user_ns, cap); in capable()
509 return ns_capable(ns, cap) && in capable_wrt_inode_uidgid()
|
| D | utsname.c | 145 if (!ns_capable(ns->user_ns, CAP_SYS_ADMIN) || in utsns_install()
146 !ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN)) in utsns_install()
|
| D | pid_namespace.c | 381 if (!ns_capable(new->user_ns, CAP_SYS_ADMIN) || in pidns_install()
382 !ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN)) in pidns_install()
|
| D | nsproxy.c | 164 } else if (!ns_capable(user_ns, CAP_SYS_ADMIN)) in copy_namespaces()
223 if (!ns_capable(user_ns, CAP_SYS_ADMIN)) in unshare_nsproxy_namespaces()
|
| /Linux-v5.15/net/8021q/ |
| D | vlan.c | 583 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
593 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
602 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
611 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
626 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
633 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in vlan_ioctl_handler()
|
| /Linux-v5.15/ipc/ |
| D | namespace.c | 204 if (!ns_capable(ns->user_ns, CAP_SYS_ADMIN) || in ipcns_install()
205 !ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN)) in ipcns_install()
|
| D | util.c | 568 !ns_capable(ns->user_ns, CAP_IPC_OWNER)) in ipcperms()
743 ns_capable(ns->user_ns, CAP_SYS_ADMIN)) in ipcctl_obtain_check()
|
| /Linux-v5.15/security/ |
| D | commoncap.c | 149 if (ns_capable(child_cred->user_ns, CAP_SYS_PTRACE)) in cap_ptrace_access_check()
557 if (ns_capable(inode->i_sb->s_user_ns, CAP_SETFCAP)) in cap_convert_nscap()
923 if (!ns_capable(new->user_ns, CAP_SETUID) || in cap_bprm_creds_from_file()
1009 if (!ns_capable(user_ns, CAP_SYS_ADMIN)) in cap_inode_setxattr()
1053 if (!ns_capable(user_ns, CAP_SYS_ADMIN)) in cap_inode_removexattr()
1182 if (!is_subset && !ns_capable(__task_cred(p)->user_ns, CAP_SYS_NICE)) in cap_safe_nice()
1241 if (!ns_capable(current_user_ns(), CAP_SETPCAP)) in cap_prctl_drop()
|
| /Linux-v5.15/net/core/ |
| D | scm.c | 55 ns_capable(task_active_pid_ns(current)->user_ns, CAP_SYS_ADMIN)) && in scm_check_creds()
57 uid_eq(uid, cred->suid)) || ns_capable(cred->user_ns, CAP_SETUID)) && in scm_check_creds()
59 gid_eq(gid, cred->sgid)) || ns_capable(cred->user_ns, CAP_SETGID))) { in scm_check_creds()
|
| D | dev_ioctl.c | 538 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in dev_ioctl()
580 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in dev_ioctl()
|
| D | sock_diag.c | 299 if (!ns_capable(sock_net(sk)->user_ns, CAP_NET_ADMIN)) in sock_diag_destroy()
|
| /Linux-v5.15/fs/ |
| D | fsopen.c | 122 if (!ns_capable(current->nsproxy->mnt_ns->user_ns, CAP_SYS_ADMIN)) in SYSCALL_DEFINE2()
165 if (!ns_capable(current->nsproxy->mnt_ns->user_ns, CAP_SYS_ADMIN)) in SYSCALL_DEFINE3()
249 if (!ns_capable(sb->s_user_ns, CAP_SYS_ADMIN)) { in vfs_fsconfig_locked()
|
| D | attr.c | 43 ns_capable(inode->i_sb->s_user_ns, CAP_CHOWN)) in chown_ok()
70 ns_capable(inode->i_sb->s_user_ns, CAP_CHOWN)) in chgrp_ok()
|
| D | init.c | 71 if (!ns_capable(current_user_ns(), CAP_SYS_CHROOT)) in init_chroot()
|
| D | ioctl.c | 394 if (!ns_capable(sb->s_user_ns, CAP_SYS_ADMIN)) in ioctl_fsfreeze()
411 if (!ns_capable(sb->s_user_ns, CAP_SYS_ADMIN)) in ioctl_fsthaw()
|
| /Linux-v5.15/security/yama/ |
| D | yama_lsm.c | 371 !ns_capable(__task_cred(child)->user_ns, CAP_SYS_PTRACE)) in yama_ptrace_access_check()
377 if (!ns_capable(__task_cred(child)->user_ns, CAP_SYS_PTRACE)) in yama_ptrace_access_check()
|
| /Linux-v5.15/net/ipv4/ |
| D | ip_options.c | 409 if (!skb && !ns_capable(net->user_ns, CAP_NET_RAW)) { in __ip_options_compile()
444 if ((!skb && !ns_capable(net->user_ns, CAP_NET_RAW)) || opt->cipso) { in __ip_options_compile()
457 if (!skb && !ns_capable(net->user_ns, CAP_NET_RAW)) { in __ip_options_compile()
|
| /Linux-v5.15/kernel/time/ |
| D | namespace.c | 294 if (!ns_capable(ns->user_ns, CAP_SYS_ADMIN) || in timens_install()
295 !ns_capable(nsset->cred->user_ns, CAP_SYS_ADMIN)) in timens_install()
|
| /Linux-v5.15/security/keys/ |
| D | persistent.c | 149 !ns_capable(ns, CAP_SETUID)) in keyctl_get_persistent()
|
| /Linux-v5.15/net/ieee802154/ |
| D | socket.c | 897 if (!ns_capable(net->user_ns, CAP_NET_ADMIN) && in dgram_setsockopt()
898 !ns_capable(net->user_ns, CAP_NET_RAW)) { in dgram_setsockopt()
921 if (!ns_capable(net->user_ns, CAP_NET_ADMIN) && in dgram_setsockopt()
922 !ns_capable(net->user_ns, CAP_NET_RAW)) { in dgram_setsockopt()
|
| /Linux-v5.15/net/ipv6/ |
| D | ipv6_sockglue.c | 328 if (optname != IPV6_RTHDR && !ns_capable(net->user_ns, CAP_NET_RAW)) in ipv6_set_opt_hdr()
626 if (valbool && !ns_capable(net->user_ns, CAP_NET_RAW) && in do_ipv6_setsockopt()
627 !ns_capable(net->user_ns, CAP_NET_ADMIN)) { in do_ipv6_setsockopt()
938 if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) in do_ipv6_setsockopt()
|
| D | datagram.c | 870 if (!ns_capable(net->user_ns, CAP_NET_RAW)) { in ip6_datagram_send_ctl()
890 if (!ns_capable(net->user_ns, CAP_NET_RAW)) { in ip6_datagram_send_ctl()
915 if (!ns_capable(net->user_ns, CAP_NET_RAW)) { in ip6_datagram_send_ctl()
|
